Success Story
Quoter modernizes its infrastructure on Kubernetes and achieves PCI compliance with Craftech as its dedicated DevOps team
At a glance
Quoter is a quote-to-cash platform for MSPs, headquartered in Vancouver, with more than 1,500 customers in over 28 countries. It started from a PHP monolith on a single EC2 instance, with no CI/CD or observability and without the PCI certifications needed to scale. Craftech acted as its DevOps team: it migrated the entire stack to Amazon EKS, split the environments into independent accounts and achieved PCI compliance in production and sandbox. It also supported the technology integration with ScalePad after the acquisition.
Quoter is a quote management (quote-to-cash) platform for IT managed service providers (MSPs), headquartered in Vancouver, Canada. Founded in 2018, it automates the entire sales cycle and has more than 1,500 customers in over 28 countries. In 2024 it was acquired by ScalePad.
Solution implemented
- Migration from ECS to Amazon EKS of the PHP monolith and the Go and Ruby microservices, in staging and production
- GitOps with ArgoCD using the App of Apps pattern
- Terraform and Terragrunt for VPC, EKS, Aurora MySQL, PostgreSQL, Redis, CloudFront and WAF
- AWS Secrets Manager with External Secrets Operator and Reloader
- Amazon CloudWatch, Grafana Alloy, AWS WAF alerts in Slack and SonarQube
- PCI DSS: segregated accounts, IAM policies, CloudTrail, WAF and root access alerts
- SOC 2 documentation and a disaster recovery plan
- CI/CD templates with GitHub Actions
Business Challenge
Quoter ran a monolithic PHP application on a single EC2 instance with no CI/CD, with services scattered across ECS and manual management in a single AWS account. It had no observability, its credentials were disorganized, and it lacked the PCI certifications needed to scale. After the acquisition by ScalePad, it also had to integrate the new group's tools and standards.
Solution
Craftech acted as Quoter's DevOps team. It redesigned the platform and migrated the PHP monolith and the Go and Ruby microservices from ECS to Amazon EKS, in staging and production, with GitOps on ArgoCD using the App of Apps pattern and CI/CD templates on GitHub Actions. It split the environments into independent accounts and managed the VPC, EKS, Aurora MySQL, PostgreSQL, Redis, CloudFront and WAF with Terraform and Terragrunt. It centralized secrets in AWS Secrets Manager with External Secrets Operator and Reloader, and added observability with Amazon CloudWatch, Grafana Alloy, AWS WAF alerts in Slack and SonarQube. For PCI DSS it implemented segregated accounts, IAM policies, CloudTrail, WAF and root access alerts; it also prepared the SOC 2 documentation and the disaster recovery plan. It supported the integration with ScalePad and trained the technical team.
Outcomes
- The entire stack migrated from EC2/ECS to Amazon EKS in staging and production
- PCI compliance in production and sandbox
- SOC 2 documentation with security controls implemented
- Disaster recovery plan documented and operational
- Automated CI/CD with GitHub Actions and ArgoCD
- Centralized secrets with automatic updates
- Technology integration with ScalePad completed
- Quoter team trained in infrastructure as code
Stack & technologies
